Audit Process

 

Planning

• An entrance conference will be scheduled with the auditable unit’s management to communicate the preliminary audit process and seek management’s input regarding risk and audit scope.
• We will conduct a series of interviews focusing on the various audit areas. The purpose of the interviews is to document what procedures are done and why.
• We will perform a preliminary analysis of the auditable unit’s financial transactions, cash receipts, sponsored research activity, petty cash accounts, and P-Card holders.
  Based on the entrance conference, preliminary interviews, and preliminary analysis, we will design our audit procedures to address each identified audit risk.

Fieldwork

• When adequate internal controls are identified we will perform walk-through tests to confirm that the tasks are performed as described.
• When weaknesses in internal controls are identified we will work in collaboration with management to design effective and efficient control recommendations.
• Detailed audit procedures will be performed in areas of higher risk. The primary focus of these procedures is on testing for compliance with University, Board of Regents, State, and Federal policies, procedures, laws, and regulations.
• We hope that our entire audit will be viewed as a collaborative project. We will strive to be prompt in notifying management of any audit concerns in order to give management an opportunity to provide insight regarding the respective issue.
• All of our audit findings and recommendations will be discussed with the staff members and management responsible for implementing the recommendations.

Reporting

• Upon completion of fieldwork we will prepare a draft of the audit report.
• After writing our audit report we will provide management with a draft of the report.
• Shortly thereafter we will schedule an exit conference with management to discuss the audit and the report. Management’s input regarding the background, tone, findings, and recommendations will be incorporated into the audit report draft.
• After the exit conference management will be asked to formally respond in writing to any findings and recommendations.
• Management’s response will be incorporated into our report and a final audit report will be issued to all required parties.